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LISTING OF THE CLAIMS: 

1 . (Currently amended): A method in a data processing system for maintaining data 
integrity in logs, the method comprising: 

reviewing a log, wherein the log includes a set of time segments, and wherein 
each time segment within the set of time segments is determined bv successively 
comparing the average time gaps of adjacent predetermined chunks of time, and wherein 
the set of time segments include at least one time segment defined by a user; 

determining whether the log contains a data loss, wherein the determining step 
includes analyzing each time segment within the set of time segments to determine 
whether a time segment gap tolerance has been exceeded, and wherein the time segment 
gap tolerance is determined bv multiplying a tota l number of c lean logs bv » st^fH 
deviation of a time gap average for the total number of clean logs and adding that product 
tp ^ ttoQ pap averajw; and 

adding data to replace the data loss in the log to increase integrity of the log if a 
determination is made that a data loss has occurred. 

2. (Canceled) 

3. (Original): The method of claim 1, wherein the data added to replace the data loss 
comprises data derived from a prior log. 

4. (Original): The method of claim 1, wherein the data added to replace the data loss 
comprises data derived from a set of prior logs. 

5. (Previously presented): The method of claim 1, wherein the log includes data 
indicating at least one of requests, page views, and sessions. 

6. (Previously presented); The method of claim 1, wherein the analyzing step 
includes considering data in at least one time segment adjacent to a time segment being 
analyzed. 
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7. (Original): The method of claim 1, wherein the log is a Web server log, 

8. (Currently amended): A method in a data processing system for analyzing a log, 
the method comprising: 

analyzing a set of time segments in the log to determine whether a time gap 
tolerance has been exceeded for a time segment within the set of time segments, wherein 
ear*,}! time gfiflmf yj tf rin the set of time segments is determined by successively 
comparing the average time gaps of adjacent predetermined chun ks of tirn p. and wherein 
the time segment gap tolerance is determined bv multiplying a total number of clean loss 
bv a standard deviation of a time gap average for the total number of clean logs and 
adding that product to the time gap average, and wherein the set of time segments include 
at least one time segment defined by a user; and 

responsive to a determination that the time gap tolerance has been exceeded for 
the time segment within the set of time segments, generating an alert. 

9. (Previously presented): The method of claim 8 fluther comprising: 
responsive to detecting the alert, adding data to the time segment within the set of 

time segments to increase the data integrity of the log. 

10. (Original): The method of claim 8, wherein the alert is presented on a user 
interface. 

1 1 . (Original): The method of claim 8, wherein the alert is a flag used by a program 
to process the log. 

12. (Original): The method of claim 8 further comprising: 
calculating a data integrity level for the log. 

13. (Previously presented): The method of claim 8, wherein the set of time segments 
include data for at least one of requests* page views, and sessions. 
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14. (Currently amended); A data processing system comprising: 
a bus system; 

a communications unit connected to the bus system; 

a memory connected to the bus system, wherein the memory includes a set of 
instructions; and 

a processing unit connected to the bus system, wherein the processing unit 
executes the set of instructions to review a log, wherein the log includes a set of time 
segments, and wherein each timfr flft fl™,CTt T vithin the set of time se gments ia determined 
bv successively comparing the average time gaps of adjacent predetermined chunks of 
time, and wherein the set of time segments include at least one time segment defined by a 
user; determine whether the log contains a data loss by analyzing each time segment 
within the set of time segments to determine whether a time segment gap tolerance has 
been exceede d, and where in the? flipe se gment gap tolerance is deter mined hy multiplying 
a total number of clean loss bv a stand ard deviation of a time gap average for the total 
number of clean logs and adding that product to the time gap average: and add data to 
replace the data loss in the log to increase integrity of the log if a determination is made 
that a data loss has occurred. 

15. (Currently amended): A data processing system comprising: 
a bus system; 

a communications unit connected to the bus system; 
a memory connected to the bus system, wherein the memory includes a set of 
instructions; and 

a processing unit connected to the bus system, wherein the processing unit 
executes the set of instructions to analyze a set of time segments in the log to determine 
whether a time gap tolerance has been exceeded for a time segment within the set of time 
segments, wherein each time segment within the set of timo segments ifl determined bv 
successively comparing the average time gaps of adjacent predetermined chunks of time, 
and where in the time segment can tolerance is determined bv. multiplying a total number 
nf r\es\r\ fogs bv a standard deviation of a time gap average for the tnt*] p^Kerr r1*<w 
logs and adding that product t n the tim e gap average, and wherein the set of time 
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segments include at least one time segment defined by a user, and generate an alert in 
response to a determination that the time gap tolerance has been exceeded for the time 
segment within the set of time segments . 

16. (Currently amended): A data processing system for maintaining data integrity in 
logs, the data processing system comprising: 

reviewing means for reviewing a log, wherein the log includes a set of time 
segments, and wherein each time segment within the set of time segments is determined 
bv successively comparing the average time gaps of adjacent predetermined chunks of 
time, and wherein the set of time segments include at least one time segment defined by a 
user; 

determining means for determining whether the log contains a data loss by 
analyzing each time segment within the set of time segments to determine whether a time 
segment gap tolerance has been exceeded , and wherein the time segment gap tolerance is 
determined b v multiplying a total number of clean logs bv a standard deviation of aJime 

gap average for the t<?fri mwfrgr ?f fam tow and friflng thnt product to the fr"? sep 

average ; and 

adding means for adding data to replace the data loss in the log to increase 
integrity of the log if a determination is made that a data loss has occurred. 

17. (Canceled) 

1 8. (Original): The data processing system of claim 16, wherein the data added to 
replace the data loss comprises data derived from a prior log. 

19. (Original): The data processing system of claim 16, wherein the data added to 
replace the data loss comprises data derived from a set of prior logs. 

20. (Previously presented): The data processing system of claim 1 6, wherein the log 
includes data indicating at least one of requests, page views, and sessions. 
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2 1 • (Previously presented): The data processing system of claim 1 6 p wherein the 
analyzing means includes considering data in at least one time segment adjacent to a time 
segment being analyzed. 

22. (Original): The data processing system of claim 16, wherein the log is a Web 
server log. 

23. (Currently amended): A data processing system for analyzing a log, the data 
processing system comprising: 

analyzing means for analyzing a set of time segments in the log to determine 
whether a time gap tolerance has been exceeded for a time segment within the set of time 
segments, wherein each time segment within the set of time segments is determined bv 
successively comparing the average time paps of adjacent predetermii^ fftF 1 *" of time, 
and wherein the time segment gap tolerance is determined by multiplying a total number 
of clean logs bv ft fftgnAnrA deviation of a time gap average for the total number of clean 
logs and ai l fling that product to the time gap average, and wherein the set of time 
segments include at least one time segment defined by a user; and 

generating means, responsive to a determination that the time gap tolerance has 
been exceeded for the time segment within the set of time segments, for generating an 
alert. 

24. (Previously presented): The data processing system of claim 23 further 
comprising: 

adding means, responsive to detecting the alert, for adding data to the time 
segment within the set of time segments to increase the data integrity of the log. 

25. (Original): The data processing system of claim 23, wherein the alert is presented 
on a user interface. 

26. (Original): The data processing system of claim 23, wherein the alert is a flag 
used by a program to process the log. 

Page 6 of 21 
Etgen- 09/871,498 

PA(S 8/23 * RCVD AT 9/20/2005 4:31:31 PM [Easten DayOgh! Time] * SVR:US>TO-EFXRF-6/33 * DNIS:2738300 * CSID:972 385 7766 * DURATION (mifrS$):Q6-22 



Sep 20 2005 3:35PM YEE 8. ASSOCIATES, P«C« 



(972J 385-77G6 



27. (Original): The data processing system of claim 23 further comprising: 
calculating means for calculating a data integrity level for the log. 

28. (Previously presented): The data processing system of claim 23, wherein the set 
of time segments include data for at least one of requests, page views, and sessions. 

29. (Currently amended): A computer program product in a computer readable 
medium for maintaining data integrity in logs, the computer program product comprising: 

first instructions for reviewing a log, wherein the log includes a set of time 
segments, and wherein each time se pme nt within the set of time segments is determined 
bv successively comparing the average time caps of adjacent predetermined chunks of 
time, and wherein the set of time segments include at least one time segment defined by a 
user, 

second instructions for determining whether the log contains a data loss by 
analyzing each time segment within the set of time segments to determine whether a time 
segment gap tolerance has been exceeded and wherein the time segment g ap tolerance is 
fltfjnnin$4 1? y piuflplYinK a tafal ffljmfrff pf clgaq foRS fry a gfrfltod fcvjajifm ft f frmq 
gap fryera gff for tftg tPtei numfrfl- Qf glefin IqW W\<$ flddfcg that prpfafl to the time gap 
ayg r a gg; and 

third instructions for adding data to replace the data loss in the log to increase 
integrity of the log if a determination is made that a data loss has occurred. 

30. (Canceled) 

3 1 . (Original): The computer program product of claim 29, wherein the data added to 
replace the data loss comprises data derived from a prior log, 

32. (Original): The computer program product of claim 29, wherein the data added to 
replace the data loss comprises data derived from a set of prior logs. 
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33. (Previously presented): The computer program product of claim 29, wherein the 
log includes data indicating at least one of requests, page views, and sessions. 

34. (Previously presented): The computer program product of claim 29, wherein the 
sub-instructions includes considering data in at least one time segment adjacent to a time 
segment being analyzed. 

35. (Original): The computer program product of claim 29, wherein the log is a Web 
server log* 

36. (Currently amended): A computer program product in a computer readable 
medium for araljrcing a log, the computer program product comprising: 

first instructions for analyzing a set of time segments in the log to determine 
whether a time gap tolerance has been exceeded for a time segment within the set of time 
segments, wherein each time seg ™?*^ wH hm the set o f Hma BafiTmemts ia determined bv 
successively comparing the avff Tflgft tiffifi gaps of adjacent predetermined chu nk a of time. 
and wherein thg time segment gap tolerance is detetinined by multiplying a total number 
of clean logs bv * stgndflril deviation of a time gap average for the tota l number of clean 
logs and adding that product to the time gap average, and wherein the set of time 
segments include at least one time segment defined by a user; and 

second instructions, responsive to a determination that the time gap tolerance has 
been exceeded for the time segment within the set of time segments, for generating an 
alert. 

37. (Previously presented): The computer program product of claim 36 further 
comprising; 

third instructions, responsive to detecting the alert, for adding data to the time 
segment within the set of time segments to increase the data integrity of the log. 

38. (Original): The computer program product of claim 36, wherein the alert is 
presented on a user interface. 
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39. (Original): The computer program product of claim 36, wherein the alert is a flag 
used by a program to process the log. 

40. (Original): The computer program product of claim 36 further comprising: 
third instructions for calculating a data integrity level for the log. 

41. (Previously presented): The computer program product of claim 36, wherein the 
set of time segments include data for at least one of requests, page views, and sessions. 
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